Zyxel-communications P-660H-D Series Manual de usuario

P-660R/H-D SeriesADSL 2+ GatewayUser’s GuideVersion 3.4011/2005Edition 1

P-660R/H-D Series User’s Guide9 Customer Support

P-660R/H-D Series User’s Guide99 Chapter 10 Firewalls10.2.2 Application-level FirewallsApplication-level firewalls restrict access by serving as prox

P-660R/H-D Series User’s GuideChapter 10 Firewalls 100• The LAN (Local Area Network) port attaches to a network of computers, which needs security fro

P-660R/H-D Series User’s Guide101 Chapter 10 Firewalls10.4.2 Types of DoS AttacksThere are four types of DoS attacks: 1 Those that exploit bugs in a

P-660R/H-D Series User’s GuideChapter 10 Firewalls 102Figure 38 Three-Way HandshakeUnder normal circumstances, the application that initiates a sess

P-660R/H-D Series User’s Guide103 Chapter 10 Firewallsthe broadcast address of the network, the router will broadcast the ICMP echo request packet to

P-660R/H-D Series User’s GuideChapter 10 Firewalls 104All SMTP commands are illegal except for those displayed in the following tables. 10.4.2.3 Trac

P-660R/H-D Series User’s Guide105 Chapter 10 FirewallsFigure 41 Stateful InspectionThe previous figure shows the Prestige’s default firewall rules i

P-660R/H-D Series User’s GuideChapter 10 Firewalls 106temporary entries might be modified, in order to permit only packets that are valid for the curr

P-660R/H-D Series User’s Guide107 Chapter 10 FirewallsWhen the Prestige receives any subsequent packet (from the Internet or from the LAN), its connec

P-660R/H-D Series User’s GuideChapter 10 Firewalls 108• Limit who can telnet into your router. • Don't enable any local service (such as SNMP or

P-660R/H-D Series User’s GuideTable of Contents 10Table of ContentsCopyright ...

P-660R/H-D Series User’s Guide109 Chapter 10 Firewalls• Always shred confidential information, particularly about your computer, before throwing it aw

P-660R/H-D Series User’s GuideChapter 10 Firewalls 110• A range of source and destination IP addresses as well as port numbers can be specified within

P-660R/H-D Series User’s Guide111 Chapter 10 Firewalls

P-660R/H-D Series User’s GuideChapter 11 Firewall Configuration 112CHAPTER 11Firewall ConfigurationThis chapter shows you how to enable and configure

P-660R/H-D Series User’s Guide113 Chapter 11 Firewall ConfigurationNote: If you configure firewall rules without a good understanding of how they work

P-660R/H-D Series User’s GuideChapter 11 Firewall Configuration 1144 Does a rule that allows Internet users access to resources on the LAN create a se

P-660R/H-D Series User’s Guide115 Chapter 11 Firewall ConfigurationThe default rule for WAN to LAN traffic blocks all incoming connections (WAN to LAN

P-660R/H-D Series User’s GuideChapter 11 Firewall Configuration 116Figure 42 Firewall: Default PolicyThe following table describes the labels in thi

P-660R/H-D Series User’s Guide117 Chapter 11 Firewall ConfigurationClick on Firewall, then Rule Summary to bring up the following screen. This screen

P-660R/H-D Series User’s GuideChapter 11 Firewall Configuration 11811.6.1 Configuring Firewall Rules Refer to Section 10.1 on page 98 for more info

P-660R/H-D Series User’s Guide11 Table of ContentsChapter 4Wizard Setup for Media Bandwidth Management ...

P-660R/H-D Series User’s Guide119 Chapter 11 Firewall ConfigurationFigure 44 Firewall: Edit RuleThe following table describes the labels in this scr

P-660R/H-D Series User’s GuideChapter 11 Firewall Configuration 120Table 34 Firewall: Edit RuleLABEL DESCRIPTIONActive Select this option to enable

P-660R/H-D Series User’s Guide121 Chapter 11 Firewall Configuration11.7 Customized Services Configure customized services and port numbers not predef

P-660R/H-D Series User’s GuideChapter 11 Firewall Configuration 122Refer to Section 10.1 on page 98 for more information. Figure 46 Firewall: Config

P-660R/H-D Series User’s Guide123 Chapter 11 Firewall ConfigurationFigure 47 Firewall Example: Rule Summary3 In the Rule Summary screen, type the in

P-660R/H-D Series User’s GuideChapter 11 Firewall Configuration 124Figure 48 Firewall Example: Edit Rule: Destination Address 7 In the Edit Rule scr

P-660R/H-D Series User’s Guide125 Chapter 11 Firewall ConfigurationFigure 50 Firewall Example: Edit Rule: Select Customized ServicesNote: Custom por

P-660R/H-D Series User’s GuideChapter 11 Firewall Configuration 126Rule 2 allows a “My Service” connection from the WAN to IP addresses 10.0.0.10 thro

P-660R/H-D Series User’s Guide127 Chapter 11 Firewall ConfigurationCU-SEEME(TCP/UDP:7648, 24032) A popular videoconferencing solution from White Pines

P-660R/H-D Series User’s GuideChapter 11 Firewall Configuration 12811.11 Anti-Probing If an outside user attempts to probe an unsupported port on yo

P-660R/H-D Series User’s GuideTable of Contents 126.4 Traffic Shaping ...

P-660R/H-D Series User’s Guide129 Chapter 11 Firewall ConfigurationFigure 52 Firewall: Anti ProbingThe following table describes the labels in this

P-660R/H-D Series User’s GuideChapter 11 Firewall Configuration 13011.12.1 Threshold ValuesTune these parameters when something is not working and af

P-660R/H-D Series User’s Guide131 Chapter 11 Firewall ConfigurationWhenever the number of half-open sessions with the same destination host address ri

P-660R/H-D Series User’s GuideChapter 11 Firewall Configuration 132Table 39 Firewall: ThresholdLABEL DESCRIPTION DEFAULT VALUESDenial of Service Thr

P-660R/H-D Series User’s Guide133 Chapter 11 Firewall ConfigurationDeny new connection request forSelect this radio button and specify for how long th

P-660R/H-D Series User’s GuideChapter 12 Content Filtering 134CHAPTER 12Content FilteringThis chapter covers how to configure content filtering. This

P-660R/H-D Series User’s Guide135 Chapter 12 Content Filtering12.3 Configuring Keyword Blocking Use this screen to block sites containing certain ke

P-660R/H-D Series User’s GuideChapter 12 Content Filtering 13612.4 Configuring the Schedule To set the days and times for the Prestige to perform co

P-660R/H-D Series User’s Guide137 Chapter 12 Content FilteringFigure 57 Content Filter: TrustedThe following table describes the labels in this scre

P-660R/H-D Series User’s GuideChapter 13 Remote Management Configuration 138CHAPTER 13Remote ManagementConfigurationThis chapter provides information

P-660R/H-D Series User’s Guide13 Table of Contents10.3.1 Denial of Service Attacks ...

P-660R/H-D Series User’s Guide139 Chapter 13 Remote Management Configuration• A filter in SMT menu 3.1 (LAN) or in menu 11.5 (WAN) is applied to block

P-660R/H-D Series User’s GuideChapter 13 Remote Management Configuration 14013.3 FTPYou can upload and download Prestige firmware and configuration f

P-660R/H-D Series User’s Guide141 Chapter 13 Remote Management Configuration

P-660R/H-D Series User’s GuideChapter 14 Universal Plug-and-Play (UPnP) 142CHAPTER 14Universal Plug-and-Play (UPnP)This chapter introduces the UPnP fe

P-660R/H-D Series User’s Guide143 Chapter 14 Universal Plug-and-Play (UPnP)14.1.3 Cautions with UPnPThe automated nature of NAT traversal application

P-660R/H-D Series User’s GuideChapter 14 Universal Plug-and-Play (UPnP) 14414.3 Installing UPnP in Windows ExampleThis section shows how to install U

P-660R/H-D Series User’s Guide145 Chapter 14 Universal Plug-and-Play (UPnP)Figure 61 Add/Remove Programs: Windows Setup: Communication 3 In the Comm

P-660R/H-D Series User’s GuideChapter 14 Universal Plug-and-Play (UPnP) 146Installing UPnP in Windows XPFollow the steps below to install the UPnP in

P-660R/H-D Series User’s Guide147 Chapter 14 Universal Plug-and-Play (UPnP)5 In the Networking Services window, select the Universal Plug and Play che

P-660R/H-D Series User’s GuideChapter 14 Universal Plug-and-Play (UPnP) 148Figure 66 Network Connections3 In the Internet Connection Properties wind

P-660R/H-D Series User’s GuideTable of Contents 1411.11 Anti-Probing ...

P-660R/H-D Series User’s Guide149 Chapter 14 Universal Plug-and-Play (UPnP)Figure 67 Internet Connection Properties 4 You may edit or delete the por

P-660R/H-D Series User’s GuideChapter 14 Universal Plug-and-Play (UPnP) 150Figure 68 Internet Connection Properties: Advanced SettingsFigure 69 In

P-660R/H-D Series User’s Guide151 Chapter 14 Universal Plug-and-Play (UPnP)Figure 70 System Tray Icon7 Double-click on the icon to display your curr

P-660R/H-D Series User’s GuideChapter 14 Universal Plug-and-Play (UPnP) 152Figure 72 Network Connections4 An icon with the description for each UPnP

P-660R/H-D Series User’s Guide153 Chapter 14 Universal Plug-and-Play (UPnP)Figure 73 Network Connections: My Network Places6 Right-click on the icon

P-660R/H-D Series User’s GuideChapter 15 Logs Screens 154CHAPTER 15Logs ScreensThis chapter contains information about configuring general log setting

P-660R/H-D Series User’s Guide155 Chapter 15 Logs ScreensFigure 75 Log SettingsThe following table describes the fields in this screen.Table 46 Lo

P-660R/H-D Series User’s GuideChapter 15 Logs Screens 15615.3 Displaying the Logs Click Logs and then View Log to open the View Logs screen. Use the

P-660R/H-D Series User’s Guide157 Chapter 15 Logs ScreensFigure 76 View LogsThe following table describes the fields in this screen. 15.4 SMTP Er

P-660R/H-D Series User’s GuideChapter 15 Logs Screens 15815.4.1 Example E-mail LogAn "End of Log" message displays for each mail in which a

P-660R/H-D Series User’s Guide15 Table of Contents15.4 SMTP Error Messages ...

P-660R/H-D Series User’s Guide159 Chapter 15 Logs Screens

P-660R/H-D Series User’s GuideChapter 16 Media Bandwidth Management Advanced Setup 160CHAPTER 16Media Bandwidth ManagementAdvanced SetupThis chapter d

P-660R/H-D Series User’s Guide161 Chapter 16 Media Bandwidth Management Advanced Setup16.2 Bandwidth Classes and FiltersUse bandwidth classes and chi

P-660R/H-D Series User’s GuideChapter 16 Media Bandwidth Management Advanced Setup 162Figure 78 Subnet-based Bandwidth Management Example16.6 Appli

P-660R/H-D Series User’s Guide163 Chapter 16 Media Bandwidth Management Advanced Setup16.7.2 Fairness-based SchedulerThe Prestige divides bandwidth e

P-660R/H-D Series User’s GuideChapter 16 Media Bandwidth Management Advanced Setup 16416.7.5 Maximize Bandwidth Usage ExampleHere is an example of a

P-660R/H-D Series User’s Guide165 Chapter 16 Media Bandwidth Management Advanced Setup• Research requires more bandwidth but only gets its budgeted 20

P-660R/H-D Series User’s GuideChapter 16 Media Bandwidth Management Advanced Setup 16616.8.1 Bandwidth Borrowing ExampleHere is an example of bandwid

P-660R/H-D Series User’s Guide167 Chapter 16 Media Bandwidth Management Advanced SetupFigure 79 Media Bandwidth Mgnt. The following table describes

P-660R/H-D Series User’s GuideChapter 16 Media Bandwidth Management Advanced Setup 168The following table describes the labels in this screen. 16.12

P-660R/H-D Series User’s GuideTable of Contents 16Chapter 18Introducing the SMT ...

P-660R/H-D Series User’s Guide169 Chapter 16 Media Bandwidth Management Advanced SetupFigure 81 Media Bandwidth Management: Class SetupThe following

P-660R/H-D Series User’s GuideChapter 16 Media Bandwidth Management Advanced Setup 170DSCP is backward compatible with the three precedence bits in th

P-660R/H-D Series User’s Guide171 Chapter 16 Media Bandwidth Management Advanced SetupFigure 83 Media Bandwidth Management: Class ConfigurationThe f

P-660R/H-D Series User’s GuideChapter 16 Media Bandwidth Management Advanced Setup 172Enable DiffServ MarkingSelect this option to enable DiffServ mar

P-660R/H-D Series User’s Guide173 Chapter 16 Media Bandwidth Management Advanced Setup16.12.3 Media Bandwidth Management Statistics Use the Media Ba

P-660R/H-D Series User’s GuideChapter 16 Media Bandwidth Management Advanced Setup 174The following table describes the labels in this screen.16.13

P-660R/H-D Series User’s Guide175 Chapter 16 Media Bandwidth Management Advanced SetupThe following table describes the labels in this screen. Tabl

P-660R/H-D Series User’s GuideChapter 17 Maintenance 176CHAPTER 17MaintenanceThis chapter displays system information such as ZyNOS firmware, port IP

P-660R/H-D Series User’s Guide177 Chapter 17 MaintenanceFigure 86 System StatusThe following table describes the fields in this screen. Table 61 S

P-660R/H-D Series User’s GuideChapter 17 Maintenance 17817.2.1 System Statistics Click Show Statistics in the System Status screen to open the follow

P-660R/H-D Series User’s Guide17 Table of Contents23.2.2 Encapsulation and Multiplexing Scenarios ...21123.2.

P-660R/H-D Series User’s Guide179 Chapter 17 MaintenanceThe following table describes the fields in this screen. 17.3 DHCP Table Screen DHCP (Dynami

P-660R/H-D Series User’s GuideChapter 17 Maintenance 180Figure 88 DHCP TableThe following table describes the fields in this screen. 17.4 Any IP T

P-660R/H-D Series User’s Guide181 Chapter 17 Maintenance17.5 Diagnostic Screens These read-only screens display information to help you identify pro

P-660R/H-D Series User’s GuideChapter 17 Maintenance 182The following table describes the fields in this screen. 17.5.2 DSL Line Diagnostic Click D

P-660R/H-D Series User’s Guide183 Chapter 17 MaintenanceThe following table describes the fields in this screen. 17.6 Firmware Upgrade Find firmware

P-660R/H-D Series User’s GuideChapter 17 Maintenance 184Figure 92 Firmware UpgradeThe following table describes the labels in this screen. Note: Do

P-660R/H-D Series User’s Guide185 Chapter 17 MaintenanceFigure 94 Error Message

P-660R/H-D Series User’s GuideChapter 18 Introducing the SMT 186CHAPTER 18Introducing the SMTThis chapter explains how to access and navigate the Syst

P-660R/H-D Series User’s Guide187 Chapter 18 Introducing the SMT18.1.3 Prestige SMT Menus OverviewThe following table gives you an overview of your P

P-660R/H-D Series User’s GuideChapter 18 Introducing the SMT 18818.2 Navigating the SMT InterfaceThe SMT (System Management Terminal) is the interfac

P-660R/H-D Series User’s GuideTable of Contents 18Chapter 27Enabling the Firewall ...

P-660R/H-D Series User’s Guide189 Chapter 18 Introducing the SMTAfter you enter the password, the SMT displays the main menu, as shown next.18.2.1 Sy

P-660R/H-D Series User’s GuideChapter 18 Introducing the SMT 19018.3 Changing the System PasswordChange the Prestige default password by following th

P-660R/H-D Series User’s Guide191 Chapter 18 Introducing the SMT

P-660R/H-D Series User’s GuideChapter 19 Menu 1 General Setup 192CHAPTER 19Menu 1 General SetupMenu 1 - General Setup contains administrative and syst

P-660R/H-D Series User’s Guide193 Chapter 19 Menu 1 General SetupFigure 98 Menu 1 General SetupFill in the required fields. Refer to the table shown

P-660R/H-D Series User’s GuideChapter 19 Menu 1 General Setup 194Figure 99 Menu 1.1 Configure Dynamic DNS Follow the instructions in the next table

P-660R/H-D Series User’s Guide195 Chapter 19 Menu 1 General Setup

P-660R/H-D Series User’s GuideChapter 20 Menu 2 WAN Backup Setup 196CHAPTER 20Menu 2 WAN Backup SetupThis chapter describes how to configure traffic r

P-660R/H-D Series User’s Guide197 Chapter 20 Menu 2 WAN Backup Setup20.2.1 Traffic Redirect SetupConfigure parameters that determine when the Prestig

P-660R/H-D Series User’s GuideChapter 20 Menu 2 WAN Backup Setup 198Metric This field sets this route's priority among the routes the Prestige us

P-660R/H-D Series User’s Guide19 Table of Contents31.2 Backup Configuration ...

P-660R/H-D Series User’s Guide199 Chapter 20 Menu 2 WAN Backup Setup

P-660R/H-D Series User’s GuideChapter 21 Menu 3 LAN Setup 200CHAPTER 21Menu 3 LAN SetupThis chapter covers how to configure your wired Local Area Netw

P-660R/H-D Series User’s Guide201 Chapter 21 Menu 3 LAN Setup21.2 Protocol Dependent Ethernet SetupDepending on the protocols for your applications,

P-660R/H-D Series User’s GuideChapter 21 Menu 3 LAN Setup 202Follow the instructions in the following table on how to configure the DHCP fields. Fo

P-660R/H-D Series User’s Guide203 Chapter 21 Menu 3 LAN Setup

P-660R/H-D Series User’s GuideChapter 22 Internet Access 204CHAPTER 22Internet AccessThis chapter shows you how to configure the LAN and WAN of your P

P-660R/H-D Series User’s Guide205 Chapter 22 Internet AccessFigure 105 IP Alias Network ExampleUse menu 3.2.1 to configure IP Alias on your Prestige

P-660R/H-D Series User’s GuideChapter 22 Internet Access 206Figure 107 Menu 3.2.1 IP Alias SetupFollow the instructions in the following table to co

P-660R/H-D Series User’s Guide207 Chapter 22 Internet AccessFigure 108 Menu 1 General Setup22.6 Internet Access ConfigurationMenu 4 allows you to e

P-660R/H-D Series User’s GuideChapter 22 Internet Access 208.If all your settings are correct your Prestige should connect automatically to the Intern

P-660R/H-D Series User’s GuideTable of Contents 2034.5 Applying an IP Policy ...

P-660R/H-D Series User’s Guide209 Chapter 22 Internet Access

P-660R/H-D Series User’s GuideChapter 23 Remote Node Configuration 210CHAPTER 23Remote Node ConfigurationThis chapter covers remote node configuration

P-660R/H-D Series User’s Guide211 Chapter 23 Remote Node ConfigurationFigure 110 Menu 11 Remote Node Setup23.2.2 Encapsulation and Multiplexing Sce

P-660R/H-D Series User’s GuideChapter 23 Remote Node Configuration 212Figure 111 Menu 11.1 Remote Node Profile In Menu 11.1 – Remote Node Profile, f

P-660R/H-D Series User’s Guide213 Chapter 23 Remote Node Configuration23.2.3 Outgoing Authentication ProtocolFor obvious reasons, you should employ t

P-660R/H-D Series User’s GuideChapter 23 Remote Node Configuration 2141 In menu 11.1, make sure IP is among the protocols in the Route field. 2 Move t

P-660R/H-D Series User’s Guide215 Chapter 23 Remote Node Configuration23.3.1 My WAN Addr Sample IP AddressesThe following figure uses sample IP addre

P-660R/H-D Series User’s GuideChapter 23 Remote Node Configuration 216Figure 113 Sample IP Addresses for a TCP/IP LAN-to-LAN Connection23.4 Remote

P-660R/H-D Series User’s Guide217 Chapter 23 Remote Node ConfigurationFigure 115 Menu 11.5 Remote Node Filter (PPPoA or PPPoE Encapsulation) 23.4.1

P-660R/H-D Series User’s GuideChapter 23 Remote Node Configuration 218Figure 117 Menu 21 Filer Set ConfigurationThe following figures display the fi

P-660R/H-D Series User’s Guide21 Table of ContentsAppendix FIP Subnetting ...

P-660R/H-D Series User’s Guide219 Chapter 23 Remote Node ConfigurationNote: Do not edit filter sets 11 and 12. They are used exclusively by the web co

P-660R/H-D Series User’s GuideChapter 23 Remote Node Configuration 220Figure 121 Menu 11.6 for LLC-based Multiplexing or PPP EncapsulationIn this ca

P-660R/H-D Series User’s Guide221 Chapter 23 Remote Node ConfigurationFigure 123 Menu 11.8 Advance Setup OptionsThe following table describes the fi

P-660R/H-D Series User’s GuideChapter 24 Static Route Setup 222CHAPTER 24Static Route SetupThis chapter shows how to setup IP static routes.24.1 IP S

P-660R/H-D Series User’s Guide223 Chapter 24 Static Route SetupFigure 125 Menu 12 Static Route SetupFrom menu 12, select 1 to open Menu 12.1 — IP St

P-660R/H-D Series User’s GuideChapter 24 Static Route Setup 224The following table describes the fields for Menu 12.1.1 – Edit IP Static Route Setup.T

P-660R/H-D Series User’s Guide225 Chapter 24 Static Route Setup

P-660R/H-D Series User’s GuideChapter 25 Bridging Setup 226CHAPTER 25Bridging SetupThis chapter shows you how to configure the bridging parameters of

P-660R/H-D Series User’s Guide227 Chapter 25 Bridging SetupFigure 128 Menu 11.1 Remote Node Profile3 Move the cursor to the Edit IP/Bridge field, th

P-660R/H-D Series User’s GuideChapter 25 Bridging Setup 22825.2.2 Bridge Static Route SetupSimilar to network layer static routes, a bridging static

P-660R/H-D Series User’s GuideTable of Contents 22Command Examples...

P-660R/H-D Series User’s Guide229 Chapter 25 Bridging Setup

P-660R/H-D Series User’s GuideChapter 26 Network Address Translation (NAT) 230CHAPTER 26Network Address Translation(NAT)This chapter discusses how to

P-660R/H-D Series User’s Guide231 Chapter 26 Network Address Translation (NAT)Figure 131 Menu 4 Applying NAT for Internet AccessThe following figure

P-660R/H-D Series User’s GuideChapter 26 Network Address Translation (NAT) 23226.3 NAT SetupUse the address mapping sets menus and submenus to create

P-660R/H-D Series User’s Guide233 Chapter 26 Network Address Translation (NAT)Figure 134 Menu 15.1 Address Mapping Sets26.3.1.1 SUA Address Mapping

P-660R/H-D Series User’s GuideChapter 26 Network Address Translation (NAT) 23426.3.1.2 User-Defined Address Mapping SetsNow let’s look at option 1 in

P-660R/H-D Series User’s Guide235 Chapter 26 Network Address Translation (NAT)26.3.1.3 Ordering Your RulesOrdering your rules is important because th

P-660R/H-D Series User’s GuideChapter 26 Network Address Translation (NAT) 236The following table explains the fields in this menu.26.4 Configuring a

P-660R/H-D Series User’s Guide237 Chapter 26 Network Address Translation (NAT)Figure 139 Menu 15.2.1 NAT Server Setup4 Enter a port number in an unu

P-660R/H-D Series User’s GuideChapter 26 Network Address Translation (NAT) 23826.5.1 Example 1: Internet Access OnlyIn the following Internet access

P-660R/H-D Series User’s Guide23 Table of Contents

P-660R/H-D Series User’s Guide239 Chapter 26 Network Address Translation (NAT)Figure 143 NAT Example 2In this case, you do exactly as above (use the

P-660R/H-D Series User’s GuideChapter 26 Network Address Translation (NAT) 240Map the other outgoing LAN traffic to IGA3 (Many : 1 mapping).You also m

P-660R/H-D Series User’s Guide241 Chapter 26 Network Address Translation (NAT)Figure 146 Example 3: Menu 11.3The following figures show how to confi

P-660R/H-D Series User’s GuideChapter 26 Network Address Translation (NAT) 242Figure 148 Example 3: Final Menu 15.1.1Now configure the IGA3 to map t

P-660R/H-D Series User’s Guide243 Chapter 26 Network Address Translation (NAT)26.5.4 Example 4: NAT Unfriendly Application ProgramsSome applications

P-660R/H-D Series User’s GuideChapter 26 Network Address Translation (NAT) 244Figure 152 Example 4: Menu 15.1.1 Address Mapping RulesMenu 15.1.1 - A

P-660R/H-D Series User’s Guide245 Chapter 26 Network Address Translation (NAT)

P-660R/H-D Series User’s GuideChapter 27 Enabling the Firewall 246CHAPTER 27Enabling the FirewallThis chapter shows you how to get started with the Pr

P-660R/H-D Series User’s Guide247 Chapter 27 Enabling the FirewallFigure 153 Menu 21.2 Firewall SetupUse the web configurator or the command interpr

P-660R/H-D Series User’s GuideChapter 28 Filter Configuration 248CHAPTER 28Filter ConfigurationThis chapter shows you how to create and apply filters.

P-660R/H-D Series User’s GuideList of Figures 24List of FiguresFigure 1 Protected Internet Access Applications ...

P-660R/H-D Series User’s Guide249 Chapter 28 Filter ConfigurationFigure 155 Filter Rule ProcessYou can apply up to four filter sets to a particular

P-660R/H-D Series User’s GuideChapter 28 Filter Configuration 25028.2 Configuring a Filter Set for the Prestige To configure a filter set, follow the

P-660R/H-D Series User’s Guide251 Chapter 28 Filter ConfigurationFigure 158 NetBIOS_LAN Filter Rules Summary Figure 159 IGMP Filter Rules Summary

P-660R/H-D Series User’s GuideChapter 28 Filter Configuration 252The protocol dependent filter rules abbreviation are listed as follows:28.4 Configur

P-660R/H-D Series User’s Guide253 Chapter 28 Filter Configuration28.4.1 TCP/IP Filter RuleThis section shows you how to configure a TCP/IP filter rul

P-660R/H-D Series User’s GuideChapter 28 Filter Configuration 254The following figure illustrates the logic flow of an IP filter.Port # Type the desti

P-660R/H-D Series User’s Guide255 Chapter 28 Filter ConfigurationFigure 161 Executing an IP Filter28.4.2 Generic Filter RuleThis section shows you

P-660R/H-D Series User’s GuideChapter 28 Filter Configuration 256To configure a generic rule select an empty filter set in menu 21, for example 5. Sel

P-660R/H-D Series User’s Guide257 Chapter 28 Filter Configuration28.5 Filter Types and NAT There are two classes of filter rules, Generic Filter Devi

P-660R/H-D Series User’s GuideChapter 28 Filter Configuration 258Figure 164 Sample Telnet Filter1 Enter 1 in the menu 21 to display Menu 21.1 — Filt

P-660R/H-D Series User’s Guide25 List of FiguresFigure 39 SYN Flood ...

P-660R/H-D Series User’s Guide259 Chapter 28 Filter Configuration2 Go to the Edit Filter Sets field, press [SPACE BAR] to choose Yes and press [ENTER

P-660R/H-D Series User’s GuideChapter 28 Filter Configuration 26028.7.1 Ethernet TrafficYou seldom need to filter Ethernet traffic; however, the filt

P-660R/H-D Series User’s Guide261 Chapter 28 Filter Configuration

P-660R/H-D Series User’s GuideChapter 29 SNMP Configuration 262CHAPTER 29SNMP ConfigurationThis chapter explains SNMP Configuration menu 22.29.1 Abou

P-660R/H-D Series User’s Guide263 Chapter 29 SNMP ConfigurationThe managed devices contain object variables/managed objects that define each piece of

P-660R/H-D Series User’s GuideChapter 29 SNMP Configuration 264Figure 170 Menu 22 SNMP ConfigurationThe following table describes the SNMP configura

P-660R/H-D Series User’s Guide265 Chapter 29 SNMP ConfigurationThe port number is its interface index under the interface group.6 whyReboot (defined i

P-660R/H-D Series User’s GuideChapter 30 System Information and Diagnosis 266CHAPTER 30System Information andDiagnosisThis chapter covers the informat

P-660R/H-D Series User’s Guide267 Chapter 30 System Information and DiagnosisThe following table describes the fields present in Menu 24.1 - System Ma

P-660R/H-D Series User’s GuideChapter 30 System Information and Diagnosis 26830.3 System InformationTo get to the System Information:1 Enter 24 to di

P-660R/H-D Series User’s GuideList of Figures 26Figure 82 DiffServ: Differentiated Service Field ...

P-660R/H-D Series User’s Guide269 Chapter 30 System Information and DiagnosisFigure 174 Menu 24.2.1 System Maintenance: InformationThe following tab

P-660R/H-D Series User’s GuideChapter 30 System Information and Diagnosis 270Figure 175 Menu 24.2.2 System Maintenance : Change Console Port SpeedOn

P-660R/H-D Series User’s Guide271 Chapter 30 System Information and DiagnosisFigure 177 Sample Error and Information Messages30.4.2 Syslog and Acco

P-660R/H-D Series User’s GuideChapter 30 System Information and Diagnosis 272Figure 179 Syslog Example1 - CDRSdcmdSyslogSend ( SYSLOG_CDR, SYSLOG_IN

P-660R/H-D Series User’s Guide273 Chapter 30 System Information and Diagnosis30.5 DiagnosticThe diagnostic facility allows you to test the different

P-660R/H-D Series User’s GuideChapter 30 System Information and Diagnosis 274The following table describes the diagnostic tests available in menu 24.4

P-660R/H-D Series User’s Guide275 Chapter 30 System Information and Diagnosis

P-660R/H-D Series User’s GuideChapter 31 Firmware and Configuration File Maintenance 276CHAPTER 31Firmware and Configuration FileMaintenanceThis chapt

P-660R/H-D Series User’s Guide277 Chapter 31 Firmware and Configuration File MaintenanceThe following table is a summary. Please note that the interna

P-660R/H-D Series User’s GuideChapter 31 Firmware and Configuration File Maintenance 278Figure 181 Telnet in Menu 24.531.2.2 Using the FTP Command

P-660R/H-D Series User’s Guide27 List of FiguresFigure 125 Menu 12 Static Route Setup ...

P-660R/H-D Series User’s Guide279 Chapter 31 Firmware and Configuration File MaintenanceFigure 182 FTP Session Example31.2.4 GUI-based FTP ClientsT

P-660R/H-D Series User’s GuideChapter 31 Firmware and Configuration File Maintenance 28031.2.6 Backup Configuration Using TFTPThe Prestige supports t

P-660R/H-D Series User’s Guide281 Chapter 31 Firmware and Configuration File MaintenanceRefer to Section 31.2.5 on page 279 to read about configuratio

P-660R/H-D Series User’s GuideChapter 31 Firmware and Configuration File Maintenance 282Figure 183 Telnet into Menu 24.61 Launch the FTP client on y

P-660R/H-D Series User’s Guide283 Chapter 31 Firmware and Configuration File Maintenance31.4 Uploading Firmware and Configuration FilesThis section s

P-660R/H-D Series User’s GuideChapter 31 Firmware and Configuration File Maintenance 284Figure 186 Telnet Into Menu 24.7.2 System Maintenance To upl

P-660R/H-D Series User’s Guide285 Chapter 31 Firmware and Configuration File Maintenance31.4.4 FTP Session Example of Firmware File UploadFigure 187

P-660R/H-D Series User’s GuideChapter 31 Firmware and Configuration File Maintenance 28631.4.6 TFTP Upload Command ExampleThe following is an example

P-660R/H-D Series User’s Guide287 Chapter 31 Firmware and Configuration File Maintenance

P-660R/H-D Series User’s GuideChapter 32 System Maintenance 288CHAPTER 32System MaintenanceThis chapter leads you through SMT menus 24.8 to 24.10.32.1

P-660R/H-D Series User’s GuideList of Figures 28Figure 168 Filtering Remote Node Traffic ...

P-660R/H-D Series User’s Guide289 Chapter 32 System Maintenance32.2 Call Control SupportCall Control Support is only applicable when Encapsulation is

P-660R/H-D Series User’s GuideChapter 32 System Maintenance 290The total budget is the time limit on the accumulated time for outgoing calls to a remo

P-660R/H-D Series User’s Guide291 Chapter 32 System MaintenanceFigure 193 Menu 24.10 System Maintenance: Time and Date Setting32.3.1 Resetting the

P-660R/H-D Series User’s GuideChapter 32 System Maintenance 292• On leaving menu 24.10 after making changes. • When the Prestige starts up, if there i

P-660R/H-D Series User’s Guide293 Chapter 32 System Maintenance

P-660R/H-D Series User’s GuideChapter 33 Remote Management 294CHAPTER 33Remote ManagementThis chapter covers remote management (SMT menu 24.11).33.1

P-660R/H-D Series User’s Guide295 Chapter 33 Remote ManagementFigure 194 Menu 24.11 Remote Management ControlThe following table describes the field

P-660R/H-D Series User’s GuideChapter 33 Remote Management 29633.3 Remote Management and NATWhen NAT is enabled:• Use the Prestige’s WAN IP address w

P-660R/H-D Series User’s Guide297 Chapter 33 Remote Management

P-660R/H-D Series User’s GuideChapter 34 IP Policy Routing 298CHAPTER 34IP Policy RoutingThis chapter covers setting and applying policies used for IP

P-660R/H-D Series User’s GuideCopyright 2CopyrightCopyright © 2005 by ZyXEL Communications Corporation.The contents of this publication may not be rep

P-660R/H-D Series User’s Guide29 List of FiguresFigure 211 Internet Options ...

P-660R/H-D Series User’s Guide299 Chapter 34 IP Policy Routing• routing the packet to a different gateway (and hence the outgoing interface).• setting

P-660R/H-D Series User’s GuideChapter 34 IP Policy Routing 300Figure 196 Menu 25.1 IP Routing Policy SetupType a number from 1 to 6 to display Menu

P-660R/H-D Series User’s Guide301 Chapter 34 IP Policy RoutingFigure 197 Menu 25.1.1 IP Routing PolicyThe following table describes the fields in th

P-660R/H-D Series User’s GuideChapter 34 IP Policy Routing 30234.5 Applying an IP PolicyThis section shows you where to apply the IP policies after y

P-660R/H-D Series User’s Guide303 Chapter 34 IP Policy RoutingFigure 198 Menu 3.2 TCP/IP and DHCP Ethernet SetupGo to menu 11.3 (shown next) and typ

P-660R/H-D Series User’s GuideChapter 34 IP Policy Routing 304Route 1 represents the default IP route and route 2 represents the configured IP route.F

P-660R/H-D Series User’s Guide305 Chapter 34 IP Policy Routing1 Check Menu 25.1 — IP Routing Policy Setup to see if the rule is added correctly.2 Crea

P-660R/H-D Series User’s GuideChapter 34 IP Policy Routing 306Figure 203 Applying IP Policies ExampleMenu 3.2 - TCP/IP and DHCP Ethernet Setup D

P-660R/H-D Series User’s Guide307 Chapter 34 IP Policy Routing

P-660R/H-D Series User’s GuideChapter 35 Call Scheduling 308CHAPTER 35Call SchedulingCall scheduling (applicable for PPPoA or PPPoE encapsulation only

P-660R/H-D Series User’s GuideList of Figures 30Figure 254 Displaying Log Categories Example ...

P-660R/H-D Series User’s Guide309 Chapter 35 Call Scheduling To setup a schedule set, select the schedule set you want to setup from menu 26 (1-12) an

P-660R/H-D Series User’s GuideChapter 35 Call Scheduling 310Once your schedule sets are configured, you must then apply them to the desired remote nod

P-660R/H-D Series User’s Guide311 Chapter 35 Call Scheduling

P-660R/H-D Series User’s GuideChapter 36 Troubleshooting 312CHAPTER 36TroubleshootingThis chapter covers potential problems and the corresponding reme

P-660R/H-D Series User’s Guide313 Chapter 36 Troubleshooting36.3 Problems with the WANTable 112 Troubleshooting the WANPROBLEM CORRECTIVE ACTIONThe

P-660R/H-D Series User’s GuideChapter 36 Troubleshooting 31436.4 Problems Accessing the Prestige36.4.1 Pop-up Windows, JavaScripts and Java Permissi

P-660R/H-D Series User’s Guide315 Chapter 36 TroubleshootingFigure 207 Pop-up BlockerYou can also check if pop-up blocking is disabled in the Pop-up

P-660R/H-D Series User’s GuideChapter 36 Troubleshooting 316Figure 209 Internet Options3 Type the IP address of your device (the web page that you d

P-660R/H-D Series User’s Guide317 Chapter 36 TroubleshootingFigure 210 Pop-up Blocker Settings5 Click Close to return to the Privacy screen. 6 Click

P-660R/H-D Series User’s GuideChapter 36 Troubleshooting 318Figure 211 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripti

P-660R/H-D Series User’s Guide31 List of Figures

P-660R/H-D Series User’s Guide319 Chapter 36 TroubleshootingFigure 212 Security Settings - Java Scripting36.4.1.3 Java Permissions1 From Internet E

P-660R/H-D Series User’s GuideChapter 36 Troubleshooting 320Figure 213 Security Settings - Java 36.4.1.3.1 JAVA (Sun)1 From Internet Explorer, clic

P-660R/H-D Series User’s Guide321 Chapter 36 TroubleshootingFigure 214 Java (Sun)36.4.2 ActiveX Controls in Internet ExplorerIf ActiveX is disabled

P-660R/H-D Series User’s GuideChapter 36 Troubleshooting 322Figure 215 Internet Options Security3 Scroll down to ActiveX controls and plug-ins.4 Und

P-660R/H-D Series User’s Guide323 Chapter 36 TroubleshootingFigure 216 Security Setting ActiveX Controls

P-660R/H-D Series User’s GuideAppendix A Product Specifications 324Appendix A Product SpecificationsSee also the Introduction chapter for a general ov

P-660R/H-D Series User’s Guide325 Appendix A Product SpecificationsTable 115 FirmwareADSL Standards Multi-Mode standard (ANSI T1.413,Issue 2; G.dmt(

P-660R/H-D Series User’s GuideAppendix A Product Specifications 326NAT/SUA Port Forwarding1024 NAT sessionsMultimedia applicationPPTP under NAT/SUAIPS

P-660R/H-D Series User’s Guide327 Appendix A Product Specifications

P-660R/H-D Series User’s GuideAppendix B About ADSL 328Appendix BAbout ADSLIntroduction to DSLDSL (Digital Subscriber Line) technology enhances the da

P-660R/H-D Series User’s GuideList of Tables 32List of TablesTable 1 ADSL Standards ...

P-660R/H-D Series User’s Guide329 Appendix B About ADSLcable modems, transmission speeds drop significantly as more users go on-line because the line

P-660R/H-D Series User’s GuideAppendix C Virtual Circuit Topology 330Appendix CVirtual Circuit TopologyATM is a connection-oriented technology, meanin

P-660R/H-D Series User’s Guide331 Appendix C Virtual Circuit Topology

P-660R/H-D Series User’s GuideAppendix D Wall-mounting Instructions 332Appendix DWall-mounting InstructionsDo the following to hang your Prestige on a

P-660R/H-D Series User’s Guide333 Appendix D Wall-mounting Instructions

P-660R/H-D Series User’s GuideAppendix E Setting up Your Computer’s IP Address 334Appendix ESetting up Your Computer’s IP AddressAll computers must ha

P-660R/H-D Series User’s Guide335 Appendix E Setting up Your Computer’s IP AddressFigure 219 WIndows 95/98/Me: Network: ConfigurationInstalling Comp

P-660R/H-D Series User’s GuideAppendix E Setting up Your Computer’s IP Address 3363 Select Microsoft from the list of manufacturers.4 Select Client fo

P-660R/H-D Series User’s Guide337 Appendix E Setting up Your Computer’s IP AddressFigure 221 Windows 95/98/Me: TCP/IP Properties: DNS Configuration4

P-660R/H-D Series User’s GuideAppendix E Setting up Your Computer’s IP Address 338Figure 222 Windows XP: Start Menu2 In the Control Panel, double-cl

P-660R/H-D Series User’s Guide33 List of TablesTable 39 Firewall: Threshold ...

P-660R/H-D Series User’s Guide339 Appendix E Setting up Your Computer’s IP AddressFigure 224 Windows XP: Control Panel: Network Connections: Propert

P-660R/H-D Series User’s GuideAppendix E Setting up Your Computer’s IP Address 340• Click Advanced.Figure 226 Windows XP: Internet Protocol (TCP/IP)

P-660R/H-D Series User’s Guide341 Appendix E Setting up Your Computer’s IP AddressFigure 227 Windows XP: Advanced TCP/IP Properties7 In the Internet

P-660R/H-D Series User’s GuideAppendix E Setting up Your Computer’s IP Address 342Figure 228 Windows XP: Internet Protocol (TCP/IP) Properties8 Clic

P-660R/H-D Series User’s Guide343 Appendix E Setting up Your Computer’s IP AddressFigure 229 Macintosh OS 8/9: Apple Menu2 Select Ethernet built-in

P-660R/H-D Series User’s GuideAppendix E Setting up Your Computer’s IP Address 3444 For statically assigned settings, do the following:•From the Confi

P-660R/H-D Series User’s Guide345 Appendix E Setting up Your Computer’s IP AddressFigure 232 Macintosh OS X: Network4 For statically assigned settin

P-660R/H-D Series User’s GuideAppendix E Setting up Your Computer’s IP Address 346Note: Make sure you are logged in as the root administrator. Using t

P-660R/H-D Series User’s Guide347 Appendix E Setting up Your Computer’s IP Address• If you have a dynamic IP address click Automatically obtain IP add

P-660R/H-D Series User’s GuideAppendix E Setting up Your Computer’s IP Address 3481 Assuming that you have only one network card on the computer, loca

P-660R/H-D Series User’s GuideList of Tables 34Table 82 Menu12.1.1 Edit IP Static Route ...

P-660R/H-D Series User’s Guide349 Appendix E Setting up Your Computer’s IP AddressFigure 240 Red Hat 9.0: Restart Ethernet Card Verifying SettingsE

P-660R/H-D Series User’s GuideAppendix F IP Subnetting 350Appendix FIP SubnettingIP Addressing Routers “route” based on the network number. The router

P-660R/H-D Series User’s Guide351 Appendix F IP SubnettingSince the first octet of a class “A” IP address must contain a “0”, the first octet of a cla

P-660R/H-D Series User’s GuideAppendix F IP Subnetting 352Since the mask is always a continuous number of ones beginning from the left, followed by a

P-660R/H-D Series User’s Guide353 Appendix F IP SubnettingNote: In the following charts, shaded/bolded last octet bit values indicate host ID bits “bo

P-660R/H-D Series User’s GuideAppendix F IP Subnetting 354Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a c

P-660R/H-D Series User’s Guide355 Appendix F IP SubnettingExample Eight SubnetsSimilarly use a 27-bit mask to create 8 subnets (001, 010, 011, 100, 10

P-660R/H-D Series User’s GuideAppendix F IP Subnetting 356Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subn

P-660R/H-D Series User’s Guide357 Appendix F IP Subnetting

P-660R/H-D Series User’s GuideAppendix G Boot Commands 358Appendix GBoot CommandsThe BootModule AT commands execute from within the router’s bootup so

P-660R/H-D Series User’s Guide35 List of TablesTable 125 Subnet 3 ...

P-660R/H-D Series User’s Guide359 Appendix G Boot CommandsFigure 243 Boot Module CommandsAT just answer OKATHE print helpATBAx

P-660R/H-D Series User’s GuideAppendix H Command Interpreter 360Appendix HCommand InterpreterThe following describes how to use the command interprete

P-660R/H-D Series User’s Guide361 Appendix H Command Interpreter

P-660R/H-D Series User’s GuideAppendix I Firewall Commands 362Appendix IFirewall CommandsThe following describes the firewall commands. Table 130 Fi

P-660R/H-D Series User’s Guide363 Appendix I Firewall Commandsconfig edit firewall e-mail return-addr <e-mail address>This command sets the sour

P-660R/H-D Series User’s GuideAppendix I Firewall Commands 364config edit firewall attack minute-low <0-255>This command sets the threshold of h

P-660R/H-D Series User’s Guide365 Appendix I Firewall CommandsConfig edit firewall set <set #> log <yes | no>This command sets whether or

P-660R/H-D Series User’s GuideAppendix I Firewall Commands 366config edit firewall set <set #> rule <rule #> destaddr-range <start ip a

P-660R/H-D Series User’s Guide367 Appendix I Firewall Commands

P-660R/H-D Series User’s GuideAppendix J Splitters and Microfilters 368Appendix JSplitters and MicrofiltersThis appendix tells you how to install a PO

P-660R/H-D Series User’s GuidePreface 36PrefaceCongratulations on your purchase of the P-660R/H-D series ADSL 2+ gateway. The P-660H has a 4-port swit

P-660R/H-D Series User’s Guide369 Appendix J Splitters and Microfilters2 Connect a cable from the double jack end of the Y-Connector to the “wall side

P-660R/H-D Series User’s GuideAppendix K PPPoE 370Appendix KPPPoEPPPoE in ActionAn ADSL modem bridges a PPP session over Ethernet (PPP over Ethernet,

P-660R/H-D Series User’s Guide371 Appendix K PPPoEFigure 247 Single-Computer per Router Hardware ConfigurationHow PPPoE WorksThe PPPoE driver makes

P-660R/H-D Series User’s GuideAppendix L Internal SPTGEN 372Appendix LInternal SPTGENInternal SPTGEN OverviewInternal SPTGEN (System Parameter Table G

P-660R/H-D Series User’s Guide373 Appendix L Internal SPTGENSome parameters are dependent on others. For example, if you disable the Configured field

P-660R/H-D Series User’s GuideAppendix L Internal SPTGEN 374Figure 252 Internal SPTGEN FTP Download ExampleNote: You can rename your “rom-t” file w

P-660R/H-D Series User’s Guide375 Appendix L Internal SPTGENThis section covers Prestige Internal SPTGEN screens. The following are Internal SPTGEN sc

P-660R/H-D Series User’s GuideAppendix L Internal SPTGEN 37630100014 = Output device filters Set 2 = 25630100015 = Output device filters Set 3 = 256

P-660R/H-D Series User’s Guide377 Appendix L Internal SPTGEN30201006 = IP Alias #1 Incoming protocol filters Set 1 = 25630201007 = IP Alias #1 Incomin

P-660R/H-D Series User’s GuideAppendix L Internal SPTGEN 378Table 134 Menu 4 Internet Access Setup (SMT Menu 4)/ Menu 4 Internet Access Setup (SMT M

P-660R/H-D Series User’s Guide37 PrefaceEmbedded web help for descriptions of individual screens and supplementary information.• ZyXEL Glossary and We

P-660R/H-D Series User’s Guide379 Appendix L Internal SPTGEN40000027 = ATM QoS Type <0(CBR) | (1 (UBR)>= 140000028 = Peak Cell Rate (PCR) = 0400

P-660R/H-D Series User’s GuideAppendix L Internal SPTGEN 380120103002 = IP Static Route set #3, Active <0(No) |1(Yes)> = 0120103003 = IP Stati

P-660R/H-D Series User’s Guide381 Appendix L Internal SPTGENFIN FN PVA INPUT120107001 = IP Static Route set #7, Name <Str> =120107002 = IP Stati

P-660R/H-D Series User’s GuideAppendix L Internal SPTGEN 382120110007 = IP Static Route set #10, Private <0(No) |1(Yes)> = 0*/ Menu 12.1.11 IP

P-660R/H-D Series User’s Guide383 Appendix L Internal SPTGEN120114005 = IP Static Route set #14, Gateway = 0.0.0.0120114006 = IP Static Route set #14

P-660R/H-D Series User’s GuideAppendix L Internal SPTGEN 384150000008 = SUA Server #3 Protocol <0(All)|6(TCP)|17(UDP)>= 0150000009 = SUA Server

P-660R/H-D Series User’s Guide385 Appendix L Internal SPTGEN150000042 = SUA Server #10 Active <0(No) | 1(Yes)> = 0150000043 = SUA Server #

P-660R/H-D Series User’s GuideAppendix L Internal SPTGEN 386210101011 = IP Filter Set 1,Rule 1 Src Port Comp <0(none)|1(equal)|2(not equal)|3(less

P-660R/H-D Series User’s Guide387 Appendix L Internal SPTGEN210103007 = IP Filter Set 1,Rule 3 Dest Port Comp <0(none)|1(equal)|2(not equal)|3(less

P-660R/H-D Series User’s GuideAppendix L Internal SPTGEN 388210105002 = IP Filter Set 1,Rule 5 Active <0(No)|1(Yes)> = 1210105003 = IP Filter S

P-660R/H-D Series User’s GuideChapter 1 Getting To Know Your Prestige 38CHAPTER 1Getting To Know Your PrestigeThis chapter describes the key features

P-660R/H-D Series User’s Guide389 Appendix L Internal SPTGEN210106013 = IP Filter Set 1,Rule 6 Act Match <1(check next)|2(forward)|3(drop)> = 3

P-660R/H-D Series User’s GuideAppendix L Internal SPTGEN 390210202001 = IP Filter Set 2, Rule 2 Type <0(none)|2(TCP/IP)> = 2210202002 = IP Filt

P-660R/H-D Series User’s Guide391 Appendix L Internal SPTGEN210203011 = IP Filter Set 2, Rule 3 Src Port Comp<0(none)|1(equal)|2(not equal)|3(less)

P-660R/H-D Series User’s GuideAppendix L Internal SPTGEN 392210205004 = IP Filter Set 2, Rule 5 Dest IP address = 0.0.0.0210205005 = IP Filter Set 2,

P-660R/H-D Series User’s Guide393 Appendix L Internal SPTGEN210206013 = IP Filter Set 2,Rule 6 Act Match <1(check next)|2(forward)|3(drop)> = 32

P-660R/H-D Series User’s GuideAppendix L Internal SPTGEN 394230400001 = Wireless Port Control <0(Authentication Required) |1(No Access Allowed) |2

P-660R/H-D Series User’s Guide395 Appendix L Internal SPTGENCommand ExamplesThe following are example Internal SPTGEN screens associated with the Pres

P-660R/H-D Series User’s GuideAppendix M Log Descriptions 396Appendix MLog DescriptionsThis appendix provides descriptions of example log messages. Ta

P-660R/H-D Series User’s Guide397 Appendix M Log Descriptions Configuration Change: PC = 0x%x, Task ID = 0x%xThe router is saving configuration change

P-660R/H-D Series User’s GuideAppendix M Log Descriptions 398 Table 145 TCP Reset LogsLOG MESSAGE DESCRIPTIONUnder SYN flood attack, sent TCP RSTTh

P-660R/H-D Series User’s Guide3 Federal Communications Commission (FCC) Interference StatementFederal CommunicationsCommission (FCC) InterferenceState

P-660R/H-D Series User’s Guide39 Chapter 1 Getting To Know Your PrestigeNote: See the product specifications in the appendix for detailed features and

P-660R/H-D Series User’s Guide399 Appendix M Log Descriptions Table 147 ICMP LogsLOG MESSAGE DESCRIPTIONFirewall default policy: ICMP <Packet D

P-660R/H-D Series User’s GuideAppendix M Log Descriptions 400 ppp:LCP Closing The PPP connection’s Link Control Protocol stage is closing.ppp:IPCP Cl

P-660R/H-D Series User’s Guide401 Appendix M Log Descriptions Connecting to content filter server failThe connection to the external content filtering

P-660R/H-D Series User’s GuideAppendix M Log Descriptions 402 Table 153 IPSec LogsLOG MESSAGE DESCRIPTIONDiscard REPLAY packet The router received

P-660R/H-D Series User’s Guide403 Appendix M Log DescriptionsCannot resolve Secure Gateway Addr for rule <%d>The router couldn’t resolve the IP

P-660R/H-D Series User’s GuideAppendix M Log Descriptions 404XAUTH fail! Username: <Username>The router was not able to use extended authenticat

P-660R/H-D Series User’s Guide405 Appendix M Log Descriptions Rule [%d] phase 2 mismatch The listed rule’s IKE phase 2 did not match between the route

P-660R/H-D Series User’s GuideAppendix M Log Descriptions 406 Rcvd data <size> too large! Max size allowed: <max size>The router received

P-660R/H-D Series User’s Guide407 Appendix M Log Descriptions 26 Database method failed.27 Path was not verified.28 Maximum path length reached.Table

P-660R/H-D Series User’s GuideAppendix M Log Descriptions 408 Table 158 ACL Setting NotesPACKET DIRECTION DIRECTION DESCRIPTION(L to W) LAN to WAN A

P-660R/H-D Series User’s GuideChapter 1 Getting To Know Your Prestige 40Content FilteringContent filtering allows you to block access to forbidden Int

P-660R/H-D Series User’s Guide409 Appendix M Log Descriptions The following table shows RFC-2408 ISAKMP payload types that the log displays. Please re

P-660R/H-D Series User’s GuideAppendix M Log Descriptions 410Log CommandsGo to the command interpreter interface. Configuring What You Want the Presti

P-660R/H-D Series User’s Guide411 Appendix M Log DescriptionsUse 0 to not record logs for that category, 1 to record only logs for that category, 2 to

P-660R/H-D Series User’s GuideIndex 412IndexNumerics110V AC 5230V AC 5AAbnormal Working Conditions 6AC 5Access methods 246Accessories 5Acts of God 6Ad

P-660R/H-D Series User’s Guide413 IndexCharge 6Circuit 3Class B 3Class Name 171Class of Service 169Class of Service (CoS) 169Collision 268Command Inte

P-660R/H-D Series User’s GuideIndex 414Electric Shock 5Electrical Pipes 5Electrocution 5E-mailLog Example 158embedded help 46Encapsulated Routing Link

P-660R/H-D Series User’s Guide415 IndexHigh Voltage Points 5Hop Count 215, 224Host 48Host IDs 350HTTP 86, 99, 100, 101HTTP (Hypertext Transfer Protoco

P-660R/H-D Series User’s GuideIndex 416Login 212Logs 154MMAC (Media Access Control) 180MAC address 228Main Menu 189maintenance 176management idle time

P-660R/H-D Series User’s Guide417 IndexPoint-to-Point 328Point-to-Point Tunneling Protocol 86policy-based routing 298Pool 5POP3 86, 100, 101Port Numbe

P-660R/H-D Series User’s GuideIndex 418Rights 2Rights, Legal 6RIP 202, 215RIPSee Routing Information Protocol 65Risk 5Risks 5RMA 6romfile 276Root Clas

P-660R/H-D Series User’s Guide41 Chapter 1 Getting To Know Your PrestigeDHCPDHCP (Dynamic Host Configuration Protocol) allows the individual clients (

P-660R/H-D Series User’s Guide419 IndexSystem Management Terminal 188System Parameter Table Generator 372System Status 267System Timeout 139, 296TTamp

P-660R/H-D Series User’s GuideIndex 420Web Configurator 44, 45, 46, 99, 107, 114, 247web configurator screen summary 46Web Site 7Wet Basement 5Wizard

P-660R/H-D Series User’s GuideChapter 1 Getting To Know Your Prestige 421.3.1 Protected Internet AccessThe Prestige is the ideal high-speed Internet

P-660R/H-D Series User’s Guide43 Chapter 1 Getting To Know Your PrestigeFigure 3 Front PanelThe following table describes the LEDs. 1.5 Hardware

P-660R/H-D Series User’s GuideChapter 2 Introducing the Web Configurator 44CHAPTER 2Introducing the WebConfiguratorThis chapter describes how to acces

P-660R/H-D Series User’s Guide45 Chapter 2 Introducing the Web Configurator6 It is highly recommended you change the default password! Enter a new pas

P-660R/H-D Series User’s GuideChapter 2 Introducing the Web Configurator 46• Click a link under Maintenance to see Prestige performance statistics, up

P-660R/H-D Series User’s Guide47 Chapter 2 Introducing the Web ConfiguratorFirewall (P-660H-D only)Default Policy Use this screen to activate/deactiva

P-660R/H-D Series User’s GuideChapter 2 Introducing the Web Configurator 482.2 Change Login Password It is highly recommended that you periodically c

P-660R/H-D Series User’s GuideFederal Communications Commission (FCC) Interference Statement 4Certifications 1 Go to www.zyxel.com2 Select your produc

P-660R/H-D Series User’s Guide49 Chapter 2 Introducing the Web Configurator

P-660R/H-D Series User’s GuideChapter 3 Wizard Setup for Internet Access 50CHAPTER 3Wizard Setup for Internet AccessThis chapter provides information

P-660R/H-D Series User’s Guide51 Chapter 3 Wizard Setup for Internet Access2 The next wizard screen varies depending on what mode and encapsulation ty

P-660R/H-D Series User’s GuideChapter 3 Wizard Setup for Internet Access 52Figure 10 Internet Connection with RFC 1483The following table describes

P-660R/H-D Series User’s Guide53 Chapter 3 Wizard Setup for Internet AccessFigure 11 Internet Connection with ENET ENCAPThe following table describe

P-660R/H-D Series User’s GuideChapter 3 Wizard Setup for Internet Access 54Figure 12 Internet Connection with PPPoAThe following table describes the

P-660R/H-D Series User’s Guide55 Chapter 3 Wizard Setup for Internet Access3 Verify the settings in the screen shown next. To change the LAN informati

P-660R/H-D Series User’s GuideChapter 3 Wizard Setup for Internet Access 56The following table describes the fields in this screen.4 The Prestige auto

P-660R/H-D Series User’s Guide57 Chapter 3 Wizard Setup for Internet Access

P-660R/H-D Series User’s GuideChapter 4 Wizard Setup for Media Bandwidth Management 58CHAPTER 4Wizard Setup for MediaBandwidth ManagementThis chapter

P-660R/H-D Series User’s Guide5 Safety WarningsSafety WarningsFor your safety, be sure to read and follow all warning notices and instructions.• To re

P-660R/H-D Series User’s Guide59 Chapter 4 Wizard Setup for Media Bandwidth Management4.2 Media Bandwidth Management Setup1 Click Media Bandwidth Mgn

P-660R/H-D Series User’s GuideChapter 4 Wizard Setup for Media Bandwidth Management 60The following table describes the labels in this screen. 2 The P

P-660R/H-D Series User’s Guide61 Chapter 4 Wizard Setup for Media Bandwidth Management3 Well done! You have finished configuration of Media Bandwidth

P-660R/H-D Series User’s GuideChapter 5 LAN Setup 62CHAPTER 5LAN SetupThis chapter describes how to configure LAN settings.5.1 LAN Overview A Local A

P-660R/H-D Series User’s Guide63 Chapter 5 LAN Setup5.1.2 DHCP SetupDHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individu

P-660R/H-D Series User’s GuideChapter 5 LAN Setup 64There are two ways that an ISP disseminates the DNS server addresses. • The ISP tells you the DNS

P-660R/H-D Series User’s Guide65 Chapter 5 LAN Setup5.2.1.1 Private IP AddressesEvery machine on the Internet must have a unique address. If your net

P-660R/H-D Series User’s GuideChapter 5 LAN Setup 665.2.3 MulticastTraditionally, IP packets are transmitted in one of either two ways - Unicast (1 s

P-660R/H-D Series User’s Guide67 Chapter 5 LAN SetupFigure 20 Any IP ExampleThe Any IP feature does not apply to a computer using either a dynamic I

P-660R/H-D Series User’s GuideChapter 5 LAN Setup 685.3 Configuring LAN Click LAN to open the LAN Setup screen. See Section 5.1 on page 62 for backgr

P-660R/H-D Series User’s GuideZyXEL Limited Warranty 6ZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that this product is f

P-660R/H-D Series User’s Guide69 Chapter 5 LAN SetupSize of Client IP PoolThis field specifies the size or count of the IP address pool.Primary DNS Se

P-660R/H-D Series User’s GuideChapter 6 WAN Setup 70CHAPTER 6WAN SetupThis chapter describes how to configure WAN settings.6.1 WAN Overview A WAN (Wi

P-660R/H-D Series User’s Guide71 Chapter 6 WAN Setup6.1.1.4 RFC 1483RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptatio

P-660R/H-D Series User’s GuideChapter 6 WAN Setup 726.1.4.2 IP Assignment with RFC 1483 EncapsulationIn this case the IP Address Assignment must be s

P-660R/H-D Series User’s Guide73 Chapter 6 WAN SetupFor example, if the normal route has a metric of "1" and the traffic-redirect route has

P-660R/H-D Series User’s GuideChapter 6 WAN Setup 74Sustained Cell Rate (SCR) is the mean cell rate of each bursty traffic source. It specifies the ma

P-660R/H-D Series User’s Guide75 Chapter 6 WAN SetupFigure 23 WAN The following table describes the links in this screen. 6.7 Configuring WAN Setup

P-660R/H-D Series User’s GuideChapter 6 WAN Setup 76Figure 24 WAN Setup (PPPoE)The following table describes the fields in this screen. Table 17

P-660R/H-D Series User’s Guide77 Chapter 6 WAN SetupEncapsulation Select the method of encapsulation used by your ISP from the drop-down list box. Cho

P-660R/H-D Series User’s GuideChapter 6 WAN Setup 786.8 Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the Prestige can

P-660R/H-D Series User’s Guide7 Customer SupportCustomer SupportPlease have the following information ready when you contact customer support.• Produc

P-660R/H-D Series User’s Guide79 Chapter 6 WAN SetupFigure 25 Traffic Redirect ExampleThe following network topology allows you to avoid triangle ro

P-660R/H-D Series User’s GuideChapter 6 WAN Setup 80Figure 27 WAN BackupThe following table describes the fields in this screen. Table 18 WAN Bac

P-660R/H-D Series User’s Guide81 Chapter 6 WAN SetupTimeout Type the number of seconds (3 recommended) for your Prestige to wait for a ping response

P-660R/H-D Series User’s GuideChapter 7 Network Address Translation (NAT) Screens 82CHAPTER 7Network Address Translation(NAT) ScreensThis chapter disc

P-660R/H-D Series User’s Guide83 Chapter 7 Network Address Translation (NAT) Screens7.1.2 What NAT DoesIn the simplest form, NAT changes the source I

P-660R/H-D Series User’s GuideChapter 7 Network Address Translation (NAT) Screens 847.1.4 NAT ApplicationThe following figure illustrates a possible

P-660R/H-D Series User’s Guide85 Chapter 7 Network Address Translation (NAT) ScreensPort numbers do NOT change for One-to-One and Many-to-Many No Over

P-660R/H-D Series User’s GuideChapter 7 Network Address Translation (NAT) Screens 86You may enter a single port number or a range of port numbers to b

P-660R/H-D Series User’s Guide87 Chapter 7 Network Address Translation (NAT) Screens7.3.3 Configuring Servers Behind SUA (Example)Let's say you

P-660R/H-D Series User’s GuideChapter 7 Network Address Translation (NAT) Screens 88The following table describes the labels in this screen. 7.5 Conf

P-660R/H-D Series User’s GuideCustomer Support [email protected] +48-22-5286603 www.pl.zyxel.com ZyXEL Communicationsul.Emilli Plater 5300-113

P-660R/H-D Series User’s Guide89 Chapter 7 Network Address Translation (NAT) ScreensFigure 32 Edit SUA/NAT Server SetThe following table describes t

P-660R/H-D Series User’s GuideChapter 7 Network Address Translation (NAT) Screens 907.6 Configuring Address Mapping Rules Ordering your rules is impo

P-660R/H-D Series User’s Guide91 Chapter 7 Network Address Translation (NAT) Screens7.7 Editing an Address Mapping Rule To edit an address mapping ru

P-660R/H-D Series User’s GuideChapter 7 Network Address Translation (NAT) Screens 92The following table describes the fields in this screen. Table 25

P-660R/H-D Series User’s Guide93 Chapter 7 Network Address Translation (NAT) Screens

P-660R/H-D Series User’s GuideChapter 8 Dynamic DNS Setup 94CHAPTER 8Dynamic DNS SetupThis chapter discusses how to configure your Prestige to use Dyn

P-660R/H-D Series User’s Guide95 Chapter 8 Dynamic DNS SetupFigure 35 Dynamic DNSThe following table describes the fields in this screen. Table 26

P-660R/H-D Series User’s GuideChapter 9 Time and Date 96CHAPTER 9Time and DateThis screen is not available on all models. Use this screen to configure

P-660R/H-D Series User’s Guide97 Chapter 9 Time and Date Table 27 Time and DateLABEL DESCRIPTIONTime ServerUse Protocol when BootupSelect the time s

P-660R/H-D Series User’s GuideChapter 10 Firewalls 98CHAPTER 10FirewallsThis chapter gives some background information on firewalls and introduces the